Information Security Analyst I

Empower AI Inc. • Sierra Vista, AZ

1d • $52,470 - $81,230 • Onsite

About The Position

Empower AI is hiring an Information Security Analyst I to assist the Program Manager and Cybersecurity Engineers with Risk Management Framework (RMF) activities, including Security Control Assessments and helping system owners transition to RMF compliance. The role contributes to the company’s mission of delivering innovative, cost-effective solutions and services that help customers adapt to dynamic environments. The position is located in Fort Huachuca, Arizona, and requires an active Secret clearance or the ability to obtain one; an active clearance is highly preferred.

The analyst will support cybersecurity deliverables and RMF authorization and assessment activities, evaluate DoD information systems against applicable security controls, develop and review system security documentation, interview technical and management personnel to understand system security posture, and assess and apply STIGs across IT devices. The role uses ACAS/Nessus, SCAP Compliance Checker, and manual checklist reviews, and calls for experience with eMASS and a strong understanding of CNSS 1253 CCIs.

Requirements

• Current and active Secret clearance or ability to obtain one; an active Secret clearance is highly preferred.
• Bachelor's degree or an equivalent combination of education and experience.
• Three years of cybersecurity experience; a degree can be substituted for experience.
• Security+ certification.
• Ability to sit for long periods.
• Ability to stand for long periods.
• Ability to ambulate throughout an office and between several buildings.

Nice To Haves

• Active Secret clearance.
• Experience with eMASS.
• Strong understanding of CNSS 1253 CCIs.

Responsibilities

• Assist the Project Manager and Cybersecurity Engineer in editing and processing cybersecurity deliverables, including RMF packages and associated artifacts.
• Assess DoD information systems against RMF security controls in accordance with DoDI 8500, DoDI 8510, and NIST SP 800-53.
• Develop and review RMF documentation and artifacts, including Configuration Management Plans, Network Infrastructure Plans, Business Continuity and Disaster Recovery Plans, POA&Ms, topology diagrams, and supporting policies.
• Interview technical Subject Matter Experts and non-technical management personnel to determine the security posture of IT systems.
• Evaluate IT devices for STIG compliance using ACAS/Nessus, SCAP Compliance Checker, and manual checklist reviews.
• Apply STIGs to various devices to ensure compliance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level